Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6cf66d31a03d1c6b97e84460dd11cad0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.6cf66d31a03d1c6b97e84460dd11cad0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6cf66d31a03d1c6b97e84460dd11cad0_JC.exe
-
Size
97KB
-
MD5
6cf66d31a03d1c6b97e84460dd11cad0
-
SHA1
be717c76d9a201faf105cff338cb4c329549430e
-
SHA256
9fb79ce3dd3f5db2306e970bcba4402fe59853a172593d33b67da21cb2b7c64f
-
SHA512
c42eabbf1bf2306ea0a0f8ef546b1f5e088049f1986bd32e0111d513902254636c10041b131e4902fca4b15b441437a378a01dd80f0b6007b4b901031d62ebd7
-
SSDEEP
1536:OzUIb25A8ULI00zTto09WhjUAsOKMBYTjipvF2g6fR:IUIbWzTtx4SO9YvQd2F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6cf66d31a03d1c6b97e84460dd11cad0_JC.exe
Files
-
NEAS.6cf66d31a03d1c6b97e84460dd11cad0_JC.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ